Error:

When running a processor such as PutSplunk the following error is generated:


mceclip0.png

Cause:

The Operating System Socket Buffer Size is too small.  The default size for RedHat is 212KB but the processor uses a default of 1MB.


Resolution:

  1. Edit /etc/sysctl.conf and append the following values
    net.core.rmem_default=512000
net.core.wmem_default=512000
net.core.rmem_max=2048000
net.core.wmem_max=2048000
  2. Reload sysctl
    sudo sysctl -p
  3. Restart the Processor